Panic Storm Over MS04-028 Reaches Category 4, Mozilla Responds With Vulnerabilites Of It's Own!

Published: 2004-09-15
Last Updated: 2004-09-16 00:04:12 UTC
by Cory Altheide (Version: 1)
0 comment(s)
JPEGs Will Destroy All Life As We Know It

As the panic over yesterday's MS04-028 patch (mentioned in the previous diary) begins spiraling wildly out of control, I'd like to offer myself up as a calm, reasonable head in this tumult of madness. Some may suggest disabling or stripping JPEG images to prevent slow patchers from being annihilated by a JPEG of Doom. I, for one, say this is folly, as it leaves end users open to attack from TIFFs & GIFs, PNGs & MNGs, not to mention the near DoS-level bandwidth consumption of BMPs!!!

I'd like to propose a return to a simpler time. A time when ANSI graphics reigned supreme. Have we really become so shallow since the days of Tradewars on a 9600 baud Renegade BBS that we demand our images be made up of *tiny* colored blocks instead of *giant* colored blocks? Advanced graphics have brought us nothing but trouble in the form of expensive graphics cards and vulnerabilities! Sure, none of these vulnerabilities have generated a decent exploit (yet?), but I'm not about to shut the barn door after the horse has already owned my box.

Mozilla, Firefox Have Vulnerabilities Too!

Not to be outdone, the Mozilla project released updates that fix a number of vulnerabilities in the Mozilla & Firefox browsers, as well as the Thunderbird mail client. Problems fixed include buffer overflows leading to remote system access, so it's recommended that users upgrade. This is actually a great excuse to upgrade to the just-released Firefox 1.0 Preview Release, which I'm loving. Updates to all Mozilla products are available here:
http://www.mozilla.org/products/ Detailed information on the vulnerabilities fixed with these updates is available here:
http://secunia.com/advisories/12526/

***************

Cory Altheide

Handler-On-Duty

***************
Keywords:
0 comment(s)

Comments

cwqwqwq
eweew<a href="https://www.seocheckin.com/edu-sites-list/">mashood</a>
WQwqwqwq[url=https://www.seocheckin.com/edu-sites-list/]mashood[/url]
dwqqqwqwq mashood
[https://isc.sans.edu/diary.html](https://isc.sans.edu/diary.html)
[https://isc.sans.edu/diary.html | https://isc.sans.edu/diary.html]
What's this all about ..?
password reveal .
<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure:

<a hreaf="https://technolytical.com/">the social network</a> is described as follows because they respect your privacy and keep your data secure. The social networks are not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go.

<a hreaf="https://technolytical.com/">the social network</a> is not interested in collecting data about you. They don't care about what you're doing, or what you like. They don't want to know who you talk to, or where you go. The social networks only collect the minimum amount of information required for the service that they provide. Your personal information is kept private, and is never shared with other companies without your permission
https://thehomestore.com.pk/

Diary Archives